$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft File: P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft (raw, json) Hash identifier: 8nFLcj0P0khJrkZK2uYGXl1zTU1LfUCwAAQMbvyKuds= Subject key identifier: 45:1E:1A:3F:A5:2E:DD:70:56:AF:B7:19:8E:C2:AE:F7:38:FD:EA:A1 Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97 Certificate issuer: /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097 Certificate serial: 0383 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft Manifest number: 036C Signing time: Fri 17 Apr 2026 00:48:23 +0000 Manifest this update: Fri 17 Apr 2026 00:48:23 +0000 Manifest next update: Fri 24 Apr 2026 00:48:23 +0000 Files and hashes: 1: P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl (hash: v6VzL4QwcjIz+23BUz0jdeZs/O0FKq11Uxi3O6XXfiQ=) 2: 460F948CF58C11ECAE269934C4F9AE02.roa (hash: W7y1CN+6cLq6cyReO/lg0SLMVpEUjYPAtp8rF5mRPak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 899 (0x383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A646, serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097 Validity Not Before: Apr 17 00:48:23 2026 GMT Not After : Apr 24 00:48:23 2026 GMT Subject: CN=69e18357-7bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:7d:33:56:2c:a3:d4:cd:d2:8c:22:dc:2e: c4:ed:90:ef:38:6d:3b:a7:57:46:aa:38:9c:fe:4c: 95:f9:3d:5f:ad:87:88:c3:ed:07:69:5c:69:9f:97: ed:d8:ce:71:f9:8e:de:22:8e:2c:dd:eb:c1:0c:7c: 4b:32:2a:1e:cc:f4:71:14:49:fb:9f:0e:db:49:c8: 0f:b5:be:63:ac:4a:55:db:91:0d:6b:11:0c:3f:02: 07:7b:03:4e:28:df:1f:a0:32:68:4b:0c:f0:88:33: 08:94:d5:6b:ee:0b:19:e1:12:5b:70:b4:e1:7d:3c: b2:d1:24:d7:c5:22:41:31:87:40:fc:fc:ec:47:ac: 7e:ab:52:0e:9d:41:0a:be:40:13:ed:91:b0:b8:32: 2e:44:10:b5:91:dd:37:16:43:46:45:a6:36:ba:51: 6c:60:d4:55:d0:55:47:37:5d:9b:4b:0b:21:7a:f2: 80:c9:79:62:67:14:d0:22:55:35:ca:4c:43:53:3c: 71:9f:a6:b3:68:fd:41:f3:9d:20:51:1e:c3:32:f4: 56:5c:cf:d9:3a:7d:e1:14:52:a6:ad:3e:8e:49:30: f1:21:f2:21:5e:40:ce:e1:98:4f:73:b7:46:da:8d: cf:d7:f7:a9:a5:00:48:b7:dc:dc:48:f1:e8:29:b2: 53:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1E:1A:3F:A5:2E:DD:70:56:AF:B7:19:8E:C2:AE:F7:38:FD:EA:A1 X509v3 Authority Key Identifier: keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:fd:10:67:95:d3:94:60:8c:04:3c:23:a4:63:a2:b2:33:e0: b4:b0:48:d6:c0:ff:b1:56:23:81:2a:30:c6:03:31:41:b9:fd: 67:da:6c:7e:87:2a:e9:53:51:0d:a8:76:80:a9:57:06:46:10: 1b:16:b8:c9:6a:6f:b6:c4:83:2b:bb:ac:52:ed:21:f3:11:bf: 5e:18:b0:19:00:f3:c3:a3:5e:53:e6:d7:55:f3:0f:16:1b:bf: 21:af:4d:f7:5d:b8:b9:b2:a9:35:21:6c:aa:7f:73:d4:6a:6c: 48:80:7d:bd:2f:cb:ee:21:ca:20:e4:2c:1e:fa:64:0e:30:dc: 27:d9:e6:2e:4c:f8:9d:01:a5:ba:3c:35:bb:49:2b:99:11:38: db:5a:05:85:d3:6b:8b:70:f9:6d:f4:88:c8:c3:50:d1:47:82: 1c:53:d1:fd:bd:95:ca:4d:8d:6e:c6:c4:68:61:6d:92:cd:67: 81:33:4f:23:07:85:bc:13:59:5c:48:e9:97:68:f4:d6:c4:f3: d1:da:68:6f:bc:04:48:84:9a:b9:e0:c9:1c:17:77:c6:35:d0: 19:24:ea:96:20:77:41:24:6c:cb:71:1b:07:c7:6f:3a:be:ba: 48:4a:8a:09:7c:c5:9f:1c:8e:06:20:12:4f:a3:da:87:57:1f: 49:4d:a4:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2NDYxMTAvBgNVBAUTKDNGQjM1ODI0NzBFRDAzRjE5NDM1RTY5QjJDMTlCNDA3 NDc3MEYwOTcwHhcNMjYwNDE3MDA0ODIzWhcNMjYwNDI0MDA0ODIzWjAYMRYwFAYD VQQDEw02OWUxODM1Ny03YmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8F9M1Yso9TN0owi3C7E7ZDvOG07p1dGqjic/kyV+T1frYeIw+0HaVxpn5ft 2M5x+Y7eIo4s3evBDHxLMioezPRxFEn7nw7bScgPtb5jrEpV25ENaxEMPwIHewNO KN8foDJoSwzwiDMIlNVr7gsZ4RJbcLThfTyy0STXxSJBMYdA/PzsR6x+q1IOnUEK vkAT7ZGwuDIuRBC1kd03FkNGRaY2ulFsYNRV0FVHN12bSwshevKAyXliZxTQIlU1 ykxDUzxxn6azaP1B850gUR7DMvRWXM/ZOn3hFFKmrT6OSTDxIfIhXkDO4ZhPc7dG 2o3P1/eppQBIt9zcSPHoKbJTHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUeGj+l Lt1wVq+3GY7Crvc4/eqhMB8GA1UdIwQYMBaAFD+zWCRw7QPxlDXmmywZtAdHcPCX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTY0Ni8yRjYzOUVCMEY1 ODUxMUVDODdGNkZFMTNDNEY5QUUwMi9QN05ZSkhEdEFfR1VOZWFiTEJtMEIwZHc4 SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3TllKSER0QV9HVU5lYWJMQm0wQjBkdzhKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTY0Ni8yRjYzOUVCMEY1ODUxMUVDODdGNkZFMTNDNEY5QUUwMi9QN05ZSkhEdEFf R1VOZWFiTEJtMEIwZHc4SmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy/0QZ5XTlGCMBDwjpGOisjPgtLBI1sD/sVYjgSowxgMxQbn9Z9psfocq6VNR Dah2gKlXBkYQGxa4yWpvtsSDK7usUu0h8xG/XhiwGQDzw6NeU+bXVfMPFhu/Ia9N 9124ubKpNSFsqn9z1GpsSIB9vS/L7iHKIOQsHvpkDjDcJ9nmLkz4nQGlujw1u0kr mRE421oFhdNri3D5bfSIyMNQ0UeCHFPR/b2Vyk2NbsbEaGFtks1ngTNPIweFvBNZ XEjpl2j01sTz0dpob7wESISaueDJHBd3xjXQGSTqliB3QSRsy3EbB8dvOr66SEqK CXzFnxyOBiAST6Pah1cfSU2k4A== -----END CERTIFICATE-----Generated at Fri Apr 17 05:29:10 2026 by rpki-client